NVD

Id
27863  
Name
CVE-2015-7176  
Description
The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf function, which might allow remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via unknown vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-09-24  
Modified Date
2016-12-21  
Seq
2015-7176  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
146177 27863 CVE-2015-7176 openSUSE-SU-2015:1658  View
146178 27863 CVE-2015-7176 openSUSE-SU-2015:1679  View
146179 27863 CVE-2015-7176 SUSE-SU-2015:1680  View
146180 27863 CVE-2015-7176 openSUSE-SU-2015:1681  View
146181 27863 CVE-2015-7176 SUSE-SU-2015:1703  View
146182 27863 CVE-2015-7176 SUSE-SU-2015:2081  View
146183 27863 CVE-2015-7176 RHSA-2015:1834  View
146184 27863 CVE-2015-7176 RHSA-2015:1852  View
146185 27863 CVE-2015-7176 DSA-3365  View
146186 27863 CVE-2015-7176 http://www.mozilla.org/security/announce/2015/mfsa2015-112.html  View
146187 27863 CVE-2015-7176 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
146188 27863 CVE-2015-7176 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
146189 27863 CVE-2015-7176 76816  View
146190 27863 CVE-2015-7176 1033640  View
146191 27863 CVE-2015-7176 USN-2743-1  View
146192 27863 CVE-2015-7176 USN-2743-2  View
146193 27863 CVE-2015-7176 USN-2743-3  View
146194 27863 CVE-2015-7176 USN-2743-4  View
146195 27863 CVE-2015-7176 USN-2754-1  View
146196 27863 CVE-2015-7176 https://bugzilla.mozilla.org/show_bug.cgi?id=1174479  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9555 JVNDB-2015-004875 Mozilla Firefox の AnimationThread 関数におけるサービス運用妨害 (DoS) の脆弱性 Mozilla Firefox の AnimationThread 関数は、sscanf 関数に不正な引数を使用するため、サービス運用妨害 (スタックベースのバッファオーバーフローおよびアプリケーションクラッシュ) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-7176 84401 CVE-2015-7176 27863 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004875.html 2015-09-22 2015-09-28 View